System and method to perform digital authentication using multiple channels of communication

Patent metadata

Field	Value
Publication number	US-12061682-B2
Application number	US-202117379537-A
Country	US
Kind code	B2
Filing date	Jul 19, 2021
Priority date	Jul 19, 2021
Publication date	Aug 13, 2024
Grant date	Aug 13, 2024

Abstract

Embodiments are generally directed to techniques and devices to communicate a first communication to a mobile device, the first communication including first data to cause the mobile device to download a mobile application, communicate a second communication to the mobile device, the second communication comprising second data comprising a task identifier, the second data to cause the mobile application to perform an authentication task associated with the task identifier, determine the user is authenticated by the authentication task, and enable the mobile device to perform sensitive actions.

First claim

What is claimed is:

1. A system configured to authenticate unauthenticated users to perform sensitive actions, comprising:
one or more processors;
memory coupled with the one or more processors, the memory to store instructions that when executed by the one or more processors, cause the one or more processors to:
communicate a first communication to a mobile device, the first communication comprising first data to cause the mobile device to download a mobile application;
generate a task identifier to identify and launch an authentication operation to perform a specific type of authentication in the mobile application to authenticate a user of the mobile device;
communicate a second communication to the mobile device, the second communication comprising second data comprising the task identifier, the second data to cause the mobile application to launch and perform the authentication operation associated with the task identifier;
determine the user is authenticated by the authentication operation; and
enable the mobile device to perform sensitive actions.

2. The system of claim 1 , wherein the authentication operation comprises prompting a user to tap a contactless card on the mobile device, and the one or more processors to:
receive encrypted data from the contactless card via the mobile device; and
verify the user is authenticated with the encrypted data based on stored data.

3. The system of claim 2 , wherein the encrypted data comprises data stored on the contactless card and is received in response to the contactless card being within a near-field communication range of the mobile device.

4. The system of claim 3 , the one or more processors to compare the data of the contactless card to the stored data stored and verify the user if they match.

5. The system of claim 1 , wherein the authentication operation comprises prompting a user to provide a picture of an identification card, and the one or more processors to:
receive the picture of the identification card; and
verify the user is authenticated with the picture.

6. The system of claim 1 , wherein the first data comprises an embedded link to a location on the mobile device to download the mobile application.

7. The system of claim 6 , wherein the first communication is a short message service (SMS) message or a rich communication service (RCS) message, and the embedded link is embedded the SMS message or RCS message.

8. The system of claim 1 , wherein the task identifier is encoded in the second data, and the second data comprises an embedded link to launch the mobile application and initiate a function to perform the authentication operation based on the task identifier.

9. The system of claim 8 , wherein the second communication is a short message service (SMS) message or a rich communication service (RCS) message, and the embedded link is embedded the SMS message or RCS message.

10. The system of claim 1 , wherein the authentication operation is performed with the mobile application without the user providing any other authentication information.

11. The system of claim 1 , the one or more processors to determine a phone number associated with the mobile device, and the authentication operation further comprising verifying the phone number is associated with user.

12. A computing device configured to authenticate unauthenticated users to perform sensitive actions, comprising:
processing circuitry;
memory coupled with the processing circuitry, the memory to store instructions that when executed by the processing circuitry, cause the processing circuitry to:
receive a first communication from a system to authenticate a user, the first communication comprising first data to install a mobile application;
install the mobile application based on invocation of the first data;
receive a second communication from the system, the second communication comprising second data comprising a task identifier to identify a specific type of authentication operation, the second data to cause the mobile application to perform the authentication operation associated with the task identifier;

initiate the authentication operation of the specific type based on invocation of the second data to determine the user is authenticate; and
receive an indication that the user is authenticated based on performance of the authentication operation, and the user is enabled to perform sensitive actions.

13. The computing device of claim 12 , comprising a wireless interface, and the processing circuitry, to perform the authentication operation, to:
prompt the user to tap a contactless card on a surface of the computing device, receive, via the wireless interface, encrypted data from the contactless card; and
verify the user is authenticated with the encrypted data.

14. The computing device of claim 13 , and the processing circuitry, to verify the encrypted data, to communicate the encrypted data to the system.

15. The computing device of claim 13 , wherein the wireless interface comprises a near-field communication (NFC) interface, and the encrypted data is received from the contactless card as part of an NFC exchange.

16. The computing device of claim 12 , comprising a camera, and the processing circuitry, to perform the authentication, to:
prompt the user to provide a picture of an identification card; and
communicate the picture to the system.

17. The computing device of claim 12 , wherein the first data comprises an embedded link to a mobile application store to download the mobile application, and the processing circuitry to receive an input on the embedded link, execute the mobile application store to download the mobile application, and download the mobile application.

18. The computing device of claim 12 , wherein the task identifier is encoded in the second data, and the second data comprises an embedded link to launch the mobile application and initiate a function to perform the authentication operation based on the task identifier.

19. The computing device of claim 12 , wherein the authentication operation is performed with the mobile application without the user providing any other authentication information.

20. The computing device of claim 12 , the processing circuitry to provide a phone number associated with computing device to the system to perform the authentication operation.

Assignees

• Capital One Services Llc

Inventors

• Bowers Justin Anthony
• Ashfield James
• Heng Melissa Yoemans

Classifications

• H04L9/3226

  using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083) · CPC title

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F9/445

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• G06F8/61

  Installation · CPC title

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title